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Abstract 

Petri  nets  augmented  with  timing  specifications  gained  a  wide  acceptance  in  the  area  of  perfor¬ 
mance  and  reliability  evaluation  of  complex  systems  exhibiting  concurrency,  synchronization,  and 
conflicts.  The  state  space  of  time-extended  Petri  nets  is  mapped  onto  its  basic  underlying  stochastic 
process,  which  can  be  shown  to  be  Markovian  under  the  assumption  of  exponentially  distributed 
firing  times.  The  integration  of  exponentially  and  non-exponentially  distributed  timing  is  still  one 
of  the  major  problems  for  the  analysis  and  was  first  attacked  for  continuous  time  Petri  nets  at  the 
cost  of  structural  or  analytical  restrictions.  We  propose  a  discrete  deterministic  and  stochastic  Petri 
net  (DDSPN)  formalism  with  no  imposed  structural  or  analytical  restrictions  where  transitions  can 
fire  either  in  zero  time  or  according  to  arbitrary  firing  times  that  can  be  represented  as  the  time 
to  absorption  in  a  finite  absorbing  discrete  time  Markov  chain  (DTMC).  Exponentially  distributed 
firing  times  are  then  approximated  arbitrarily  well  by  geometric  distributions.  Deterministic  fir¬ 
ing  times  are  a  special  case  of  the  geometric  distribution.  The  underlying  stochastic  process  of  a 
DDSPN  is  then  also  a  DTMC,  from  which  the  transient  and  stationary  solution  can  be  obtained  by 
standard  techniques.  A  comprehensive  algorithm  and  some  state  space  reduction  techniques  for  the 
analysis  of  DDSPNs  are  presented  comprising  the  automatic  detection  of  conflicts  and  confusions, 
which  removes  a  major  obstacle  for  the  analysis  of  discrete  time  models. 
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tThis  research  was  supported  in  part  by  the  National  Aeronautics  and  Space  Administration  under  NASA  Contract 

No.  NASl-19480  while  the  second  author  was  in  residence  at  the  Institute  for  Computer  Applications  in  Science  and 
Engineering  (ICASE),  NASA  Langley  Research  Center,  Hampton,  VA  23681-0001. 
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1  Introduction 


Petri  nets  (PN)  [13]  proved  to  be  a  powerful  graphical  and  mathenaatical  modeling  tool  that  allows 
to  describe  and  analyze  complex  systems  exhibiting  concurrency,  synchronization,  and  conflicts. 
The  ability  to  model  timed  and  probabilistic  behavior  is  essential  in  the  field  of  performance  and 
reliability  evaluation.  This  need  leads  to  various  different  extensions  of  the  PN  formalism,  where 
the  class  of  stochastic  Petri  nets  (SPNs)  gained  the  widest  acceptance.  In  SPNs,  firing  time  delays 
are  specified  by  probability  distributions  associated  to  transitions.  SPNs  are  often  classified  as 
continuous  or  discrete  time,  depending  on  the  type  of  firing  time  distributions  and  on  the  underlying 
stochcLstic  process. 

Deterministic  and  stochastic  Petri  nets  (DSPNs)  [3]  represent  the  most  important  continuous 
time  approach  where  transitions  can  fire  either  in  zero  time  or  after  a  constant  (deterministic) 
or  exponentially  distributed  time  delay.  The  initial  definition  of  DSPNs  imposed  the  structural 
restriction  that  concurrent  deterministic  activities  cannot  be  present.  This  problem  was  theoretically 
solved  in  [10].  However,  the  solution  is  not  feasible  in  practice  because  it  leads  to  a  state  space 
explosion  when  a  larger  number  of  concurrent  deterministic  activities  is  to  be  considered. 

Discrete  time  stochastic  Petri  nets  [12]  belong  instead  to  the  discrete  approach,  where  transition 
firing  times  are  specified  by  geometric  distributions  which  approximate  the  exponential  distribution 
arbitrarily  well  in  discrete  time.  Other  approaches  having  an  underlying  discrete  time  stochastic 
process  have  been  presented  in  [15]  (Timed  Petri  nets)  and  in  [11]  (Generalized  Timed  Petri  nets), 
but  they  does  not  achieve  the  modeling  power  of  DSPNs. 

The  mixture  of  deterministic  and  stochastic  firing  times  still  imposes  severe  problems  on  the 
quantitative  analysis  of  a  time-extended  PN,  since  the  state  space  needs  to  be  generated  and  mapped 
onto  the  basic  underlying  stochastic  process.  Our  work  attacks  this  problem  by  adopting  a  pure 
discrete-time  approach.  However,  conflicts  and  confusions  among  transition  firings  are  more  likely 
to  occur  in  discrete  than  in  continuous  time,  since  transitions  are  allowed  to  fire  only  at  certain 
discrete  instants  of  time.  Thus,  simultaneous  firing  attempts  of  all  transitions,  including  the  timed 
transitions,  can  take  place.  The  detection  of  the  sets  of  transitions  involved  in  conflicts  and  con¬ 
fusions  is  a  precondition  for  the  correct  specification  of  probabilistic  firing  weights  resolving  these 
situations.  This  is  an  important  and  oftenly  neglected  issue  especially  for  discrete  time  models. 

In  [14],  Discrete  time  Deterministic  and  Stochastic  Petri  nets  (dtDSPNs)  were  introduced  where 
transitions  fire  either  in  zero  time  or  after  a  constant  or  geometrically  distributed  time  delay  without 
any  structural  restriction.  The  deterministic  time  delay  is  then  modeled  as  a  special  case  of  the 
geometric  distribution.  In  dtDSPNs,  the  problem  of  conflicts  and  confusions  is  relaxed  to  a  certain 
degree  by  an  unconventional  approach.  The  sequentialization  of  simultaneously  fireable  timed  tran- 
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sitions  is  not  enforced,  which  leads  to  the  elimination  of  confusion  situations  for  timed  transitions. 
The  drawback  of  this  approach  is  that  a  dtDSPN  model  can  generate  states  which  are  not  covered 
-  by  the  classical  Petri  net  theory. 

A  more  general  approach  was  proposed  in  [5]  with  Discrete  Time  Markovian  SPNs  (DTMSPNs), 
where  firing  time  distributions  are  specified  by  arbitrary  finite  absorbing  DTMCs.  It  has  been  proven 
in  [5]  that  the  underlying  stochastic  process  of  a  DTMSPN  is  a  DTMC,  provided  that  the  modeler 
detects  and  resolves  all  conflicts  and  confusions  manually,  possibly  a  very  difficult  task.  This 
drawback  lead  in  [8]  to  the  development  of  a  new  method  for  the  automatic  detection  of  conflicts 
and  confusions  applicable  to  all  types  of  stochastic  Petri  nets.  This  approach  is  independent  of 
structural  PN  properties  and  is  solely  based  on  the  state  space  generation  of  a  given  model,  so 
that  only  actually  occurring  conflicts  and  confusions  are  detected.  This  is  is  not  the  case  for 
the  structural  tests  employed  in  continuous  time  approaches,  which  are  based  on  necessary,  not 
sufficient,  conditions.  Thus,  structural  tests  can  lead  to  an  overspecification  of  a  given  model 
resulting  in  a  more  difficult  correct  interpretation  of  obtained  results  measures. 

The  work  presented  in  this  paper  combines  the  results  of  [14],  [5],  and  [8],  while  removing  the 
mentioned  drawbacks  of  [14]  and  [5].  We  define  discrete  deterministic  and  stochastic  Petri,  nets 
(DDSPNs).  In  DDSPNs,  transitions  can  fire  either  in  zero  time  or  after  a  time  delay  specified  by 
arbitrary  finite  absorbing  DTMCs  without  any  structural  restriction.  Firing  time  distributions  of 
a  DDSPN  include  the  geometric  and  the  deterministic  distribution  cis  a  special  case.  Any  other 
discrete  distribution  that  can  be  expressed  by  a  finite  absorbing  DTMC  can  be  freely  defined,  such 
as  the  discrete  uniform  distribution.  We  adapt  the  general  approach  for  the  automatic  detection 
of  conflicts  and  confusions  from  [8]  and  integrate  it  into  the  solution  method  for  the  analysis  of 
DDSPNs.  Together  with  the  solution  method,  a  new  algorithm  for  the  complex  and  non-trivial  state- 
space  generation  is  presented,  mapping  a  DDSPN  onto  a  DTMC,  from  which  again  the  transient 
and  stationary  solution  can  be  obtained  by  standard  techniques.  Finally,  some  state  space  reduction 
techniques  for  DDSPNs  are  proposed  to  relax  the  inherent  problem  of  state  space  explosion. 

Section  2  defines  untimed  PNs.  Section  3  introduces  the  discrete  firing  time  distributions  of 
DDSPN  transitions.  Sections  4  and  5  present  the  complete  DDSPN  formalism  itself  and  the  cor¬ 
responding  state  space  reduction  methods.  Numerical  results  are  shown  in  Section  6,  followed  by 
concluding  remarks  in  Section  7. 
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2  The  PN  Formalism 


We  recall  the  (extended)  PN  formalism  used  in  [8].  See  also  [4]  for  more  details  on  PNs  with 
marking-dependent  arc  multiplicities.  A  PN  is  a  tuple  D~ ,  D'^ ,  D°  ,y ,  g,  where: 

•  P  is  a  finite  set  of  places,  which  can  contain  tokens.  A  marking  fi  €  IN^^^  defines  the  number 
of  tokens  in  each  place  p  ^  P,  indicated  by  pp  (when  relevant,  a  marking  should  be  considered 
a  column  vector).  D~,  D'^,  D°,  and  g  are  “marking-dependent”,  that  is,  they  are  specified  as 
functions  of  the  marking. 

•  T  is  a  finite  set  of  transitions.  P  ft  T  =  0. 

•  Vp  G  P,v<  e  r,Vp  G  IN'-^I,  D~t{p)  e  in,  P^i(p)  e  in,  and  Dp  tifi)  G  IN  are  the  multiplicities 
of  the  input  arc  from  p  to  t,  the  output  arc  from  t  to  p,  and  the  inhibitor  arc  from  p  to  t,  when 
the  marking  is  p,  respectively. 

•  C  r  X  T  is  an  acyclic  {pre-selection)  priority  relation. 

•  'it  £T,'ifx  £  ¥l^^\gt{fi)  €  {0, 1}  is  the  guard  for  t  in  marking  p. 

•  G  IN'^I  is  the  initial  marking. 

Places  and  transitions  are  drawn  as  circles  and  rectangles,  respectively.  The  number  of  tokens  in 
a  place  is  written  inside  the  place  itself  (default  is  zero).  Input  and  output  arcs  have  an  arrowhead 
on  their  destination,  inhibitor  arcs  have  a  small  circle.  The  multiplicity  is  written  on  the  arc  (default 
is  the  constant  1);  a  missing  arc  indicates  that  the  multiplicity  is  the  constant  0.  The  default  value 
for  guards  is  the  constant  1. 

Let  P(/i)  be  the  set  of  transitions  enabled  in  marking  g.  A  transition  t  G  T  is  enabled  in  marking 
g  if,  and  only  if,  its  guard  evaluates  to  1,  its  input  and  inhibitor  arc  conditions  are  satisfied,  and 
no  other  transition  with  pre-selection  priority  over  t  is  enabled  (this  is  well  defined  because  is 
acyclic): 

{gt{g)  =  1)  A  (Vp  G  P,  P-^g)  <  gp  A  (Dltig)  >  f^pi  Dl^{g)  =  o))  A  (Vu  G  S{g),  u)f-t). 

A  transition  t  G  S{g)  can  fire,  causing  a  change  to  marking  M{t,g),  obtained  from  g  by 
subtracting  the  input  bag  i)7,<(/^)  a^iid  adding  the  output  bag  Dt,t{g)  to  it; 

M{t,g)  =  g-  D-t{g)  -t-  Dt^^{g)  =  g  +  D,,t{g), 
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where  D  —  D'^  —  D~  is  the  incidence  matrix.  M  can  be  extended  to  its  reflexive  and  transitive 
closure  by  considering  the  marking  reached  from  fx  after  firing  a  sequence  of  transitions.  The 
reachability  set  is  then  given  by 

S  =  {fi  :3a  eT*  A IX  =  M{a,ix^°^)}, 

where  T*  indicates  the  set  of  transition  sequences.  The  reachability  graph  is  (<S,  A),  where  A  contains 
an  arc  ix-^fx'  iff  t  G  T,  and  fx'  =  M.{t,ix). 

3  Discrete  Time  Phase  Distributions 

Firing  times  of  transitions  in  DDSPNs  are  modeled  by  discrete  time  phase  distributions  (DTPs). 

Definition  3.1  A  DTP  is  represented  by  a  finite  absorbing  discrete  time  Markov  chain 
(DTMC)  {Xis\i  E  IN}  where 

•  d  >  0  is  the  underlying  constant  time-step. 

•  Xis  E  I  =  {n,n  —  1,  the  finite  state  space  of  the  DTMC.  Each  state  corre¬ 

sponds  to  a  possible  distribution  of  the  remaining  firing  time  (RFT)  for  a  transition. 

•  Wk  E  I,  Pr{Xo  =  k}  is  the  initial  probability  distribution,  such  that  Pr{Xo  = 

A:}  =  1. 

States  I  \  {0}  are  transient.  State  0  is  absorbing  and  represents  the  case  that  a  phase 
reached  zero  and  that  the  corresponding  transition  is  allowed  to  fire.  □ 

Two  additional  symbolic  DTP  states,  whose  sojourn  times  are  zero,  b  and  •,  are  introduced. 
The  symbolic  state  b  (for  begin)  represents  the  initial  probability  distribution  of  a  DTP.  Since  DTPs 
will  be  used  for  modeling  RFTs  of  transitions,  a  second  symbolic  state  •  is  needed  to  represent 
unambiguously  the  case  when  a  transition  is  disabled  and  no  definite  phase  is  specified. 

Special  cases  of  a  DTP  are  for  instance  the  geometric,  constant,  and  the  uniform  distribution. 
In  the  following  we  will  show  how  these  discrete  distributions  can  be  represented  by  DTPs.  From 
now  on,  the  states  of  I  will  be  referred  to  as  phases,  to  make  a  clear  distinction  between  DTP  states 
and  the  overall  state  space  of  a  DDSPN. 

Geometric  Distribution 

The  geometric  distribution,  Geom(a,a;)  with  probability  a  E  (0,1),  approximates  the  exponential 
distribution  in  discrete  time  arbitrarily  well  as  its  unit-step  w  >  0  decreases.  The  probability  mass 
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function  (pmf),  cumulative  probability  distribution  function  (CDF),  and  expectation  of  a  random 
variable  X  ~  Geom(Q:,  u)  are  then  given  by 

Qr(l  —  if  i  G  IN"^,  where  IST*’  =  {1,2, 3, ...}, 

0  otherwise. 


pmf:  = 


CDF:  Fx{x)  = 
mean:  ^  (average  delay) 


1  —  (1  —  q:)!-"  J  if  a:  >  0, 

0  otherwise. 


px(iw) 


0.5  + 


0  u  3tJ  Au 


t'xix) 

0.5  + 


0  w  2a;  3a;  4a; 


pmf 


PDF 


Figure  1:  X  ~  Geom(0.5,a;). 

Fig.  1  shows  the  pmf  and  CDF  of  X  ~  Geom(0.5,a>).  The  DTP  representation  of  Geom(a,a;) 
depends  on  its  unit-step  u,  defined  as  an  arbitrary  non-negative  integer  multiple,  a;  =  C(J,  c  G  IN"'’,  of 
the  constant  basic  underlying  time-step  >  0  of  all  DTPs.  For  example,  two  geometric  distributions, 
Geom(l/5,  J)  and  Geom(4/5,4J),  have  different  DTPs  but  the  same  mean  value  of  5^.  Fig.  2  shows 
the  DTP  representations  of  X  ~  Geom(a,  ^)  and  X  ~  Geom(Q;,  4(J).  The  states  of  a  DTP  (or 
phases)  are  represented  by  nodes  and  the  probabilistic  state  transitions  by  labeled  arcs. 


Ceom(a,  AS)  Ceom(a, 


Figure  2:  DTP  representations  of  geometric  distributions. 


Constant  Distribution 

The  constant  distribution,  Const (w)  with  a;  >  0,  can  be  seen  as  a  special  case  of  the  geometric 
distribution,  where  a  =  1,  so  Const(a;)  =  Geom(l,cj).  The  pmf  and  CDF  (Fig.  3)  of  a  random 
variable  X  ~  Const  (u;)  are  then  given  by 
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•  pmf: 


1  if  z  =  1, 

0  otherwise. 


•  CDF:  Fx{x) 


0  if  X  <  w, 

1  otherwise. 


PA-(*w)  t’x(pc) 

T  4 


tLJ 


X 


0  u  'lu 


0  (j  2w 


pnif 


PDF 


Figure  3:  X  ~  Const (w). 

Immediate  transitions  (firing  in  zero  time)  can  be  modeled  by  a  special  case  of  the  constant 
distribution  where  X  ~  Const (0).  Fig.  4  shows  the  DTP  representations  of  ~  Const (0)  and 
X  ~  Const  (4^). 


Const  (4<5) 


Const  (0) 


Figure  4:  DTP  representations  of  constant  distributions. 


Discrete  Uniform  Distribution 


Like  the  geometric  distribution,  the  discrete  imiform  distribution,  Unif(a,6,u;)  where  a,  6  G  IN,  a  < 
6,  and  cu  is  a  multiple  of  5.  The  pmf,  CDF,  and  expectation  of  a  random  variable  X  ~  Unif(a,  6,  w) 
are  then  given  by 


•  pmf:  px(iijj) 


(6  — c  +  1)  ^  if  z  G  {a,a+ 1,...,6}, 
0  otherwise. 


10  if  X  <  aw, 

( —  a  +  1)(6  —  a  +  1)~^  if  aw  <  X  <  few, 

1  if  X  >  6w. 

•  mean:  (average  delay) 

Fig.  5  shows  for  example  the  pmf  and  CDF  of  X  ~  Unif(2,5,w)  and  Fig.  6  the  DTP  represen¬ 
tations  of  different  uniform  distribution  examples. 
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px(iw) 


0.5  + 


0  u;  2w  ^  Au  5a;  6a; 


X 


prof 


FDF 


Figure  5:  X  ~  Unif(2,5,w). 

Uiijf(0,2,<S)  : 

Cb>:-2/.' 

Ujiif(l,3, 

(gv.....2 

Unif(2,5,<5)  : 

(,£> . 1— >(5) —  1 

Figure  6:  DTP  representations  of  uniform  distributions. 

4  The  DDSPN  Formalism 

Basic  definitions  of  the  DDSPN  formalism  and  the  specification  of  race  policies  are  explained  in 
Sections  4.1  and  4.2,  respectively.  Sections  4.3  and  4.4  examine  the  DDSPN  state  space  and 
introduce  the  concept  of  well-defined  DDSPNs,  which  is  needed  for  the  correct  generation  of  the 
underlying  stochastic  process  of  a  DDSPN  model.  Finally,  Section  4.5  proposes  an  algorithm  for 
the  reduced  reachability  graph  generation  of  a  well-defined  DDSPN  from  which  the  underlying 
stochastic  process  can  be  derived  and  numerically  analyzed. 


-2/3^®- 1 


1/2^><2)-1*(4)— i- 
•1/2; 

1/.3- 


4.1  Basic  Definitions 

Informally,  a  DDSPN  is  obtained  by  associating  a  discrete  time  random  delay,  a  DTP,  to  each  PN 
transition.  A  state  s  of  a  DDSPN  consists  of  two  discrete  components,  the  marking  /i  and  the 
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vector  (j)  containing  the  phase  for  each  transition: 

s  =  (^,<^)  G  IN'^I  X 

Each  entry  of  (f)  represents  the  current  phase  of  the  DTP  associated  to  transition  t. 

Definition  4.1  Formally,  a  DDSPN  is  a  tuple 

{P,  gPI,  C,  to) 

where: 

•  (^P,  T,  D"*",  D°^y,g,  defines  an  extended  PN  as  introduced  in  Section  2. 

•  Vt  €  r,  4>t  C  IN  is  the  finite  set  of  phases  of  the  DTP  associated  to  transition  t. 

•  VjU  €  <S,Vt  G  G  is  the  probability  that  the  phase  of  transi¬ 

tion  t  changes  from  i  to  j  in  marking  g  at  the  end  of  one  time-step  S.  Hence, 

j)  —  1.  Gt  specifies  the  one-step  transition  probability  matrix  of  the 
DTP  of  an  enabled  transition  t  in  isolation.  The  phase  of  a  disabled  transition  does 
not  change  in  isolation:  =  1  if  t  ^ 

All  combinations  of  possible  new  phases  for  all  enabled  transitions  must  be  con¬ 
sidered  when  (f)  is  changed  at  the  end  of  a  step  of  length  5.  This  leads  to  the 
construction  of  the  set  such  that  V<^'  G  4>'  is  a  possible  combina¬ 

tion  of  phases  for  all  transitions: 

where  =  \J 

•  V/i  G  S,Vt  G  6{n),yu  G  G  is  the  probability  that  the  phase 

of  transition  u  changes  from  i  to  j  when  transition  t  fires  in  marking  g. 

F  is  used  for  the  specification  of  race  policies  (see  Section  4.2)  for  transitions. 
Again,  all  combinations  of  possible  new  phases  for  all  transitions  need  to  be  con¬ 
sidered  when  <f>  is  changed  by  the  firing  of  t  m  p  leading  to  the  construction  of  the 
set  <f>),  such  that  V<f>'  G  lF{t,p,4>),  (f)'  is  a  possible  combination  of  phases  for 

all  transitions: 

T{t,p,4>)=  where  =  (J 

•  yt  ^  T,  G  is  the  initial  pha.se  of  transition  t  at  time  0. 

•  >~C  T  X  T  is  an  acyclic  post-selection  priority  relation. 
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•  (7  C  2^  is  a  partition  of  T  into  locally  defined  weight  classes:  V(7e,  Cy  E  C,Cx  ^ 
Cy=^Cx  C\Cy  =  ^  and  Uc*€C  =  T.  Let  Ct  be  the  local  weight  class  containing 
transition  t  £  T.  By  setting  Cx  =  T,  we  can  model  a  global  weight  definition  as  in 
[5]. 

•  W/j,  €.  S,\ft  E  £{iJ,),yS  C  Ct  n  £{fj,),Wt\s{lJ')  €  IR"*"  is  the  firing  weight  for  t  in 
marking  //  when  S  is  the  set  of  candidates  to  fire  in  the  same  weight  class  as  t.  See 
the  following  description  for  the  definition  of  a  candidate. 


□ 

In  a  DDSPN,  a  transition  may  only  fire  in  a  state  where  it  is  a  candidate.  For  this  reason,  the 
enabling  rule  of  Section  2  needs  to  be  extended  by  the  following  definition. 

Definition  4.2  A  transition  t  G  T  is  &  candidate  (to  fire)  in  state  s  =  (//,  <f>)  iff  it  is 
enabled,  its  phase  is  zero,  and  no  other  candidate  has  post-selection  priority  over  it  (this 
is  well  defined  because  >-  is  acyclic): 

1.  t  A 

2.  <f)t  =  0  A 

3.  Wu  €.  T,u  Y- 1  V  u  is  not  a  candidate  in  s. 


□ 

Moreover,  the  firing  rule  of  Section  2  is  extended  from  markings  to  states  for  DDSPNs.  Let  C{s) 
be  the  set  of  candidates  in  state  s  =  (/^,<^).  Then,  the  probability  that  transition  t  G  C(s)  is  chosen 
to  fire,  given  that  one  of  the  transitions  in  its  weight  class  Ct  fires,  is 

-  (  ^  Wt\c(s)nCt 

«^t|C(s)nat(^)  =  ■  — 

u^C{$)r\Ct 

Note,  that  in  DDSPNs  firing  probabilities  are  only  defined  among  transitions  belonging  to  the  same 
weight  class. 

4.2  Race  Policies 

A  candidate  transition  t  G  C{s)  may  fire  in  a  state  s  =  {/j,,  <j>)  leading  to  the  new  marking  fi'  — 
M{t,iJ,).  Dynamic  race  policies  [1]  can  be  then  expressed  for  a  transition  u  ^  T,  where  u  t, 
according  to  Ft,u{y>i  •)•  This  means  that,  depending  on  which  transition  t  fired,  one  of  the  following 
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three  race  policies  is  applied  to  u  which  may  cause  its  phase  4>u  G  to  (re)sample  a  random  deviate 
(j)'^  G  from  the  distribution  •■,■)' 

R-R,  race  with  resampling: 

The  phase  of  u  is  always  resampled 

^  4>u-,  4>u)  =  <  if  w  ^  S{pl')  A4>{,  =  », 

0  otherwise. 

The  resampling  policy  is  always  used  when  u  =  t  or  when  <f)u  =  •-  In  all  other  cases,  it  can  still  be 
used,  or  one  of  the  following  two  policies  can  be  used  instead. 

R-A,  race  with  age  memory: 

The  phase  of  u  is  not  changed  by  the  firing  of  t 

R-E,  race  with  enabling  memory. 

The  phase  of  u  is  only  resampled  if  u  becomes  disabled  by  the  firing  of  t 

f  1  if  u  G  E{pl')  A<f>[,  =  <i)u, 

4>u,  =  I  I  if  «  ^  S{ix')  A<t>'^  =  *, 

[  0  otherwise. 

The  approach  just  described  allows  different  race  policies  to  be  applied  to  a  transition  u  G  T 
depending  on  which  transition  t  £T  fires.  Thus,  it  extends  the  modeling  power  by  generalizing  the 
definition  of  [1],  where  a  transition  may  have  only  a  single  race  policy  for  all  transition  firings. 

4.3  The  DDSPN  State  Space 

The  underlying  stochastic  process  of  a  DDSPN  is  a  DTMC  G  IN}  with  state  space 

S  C  X  IN'^L  The  time-step  of  the  DTMC  is  given  by  5,  such  that  G  <S  is  a  DDSPN 

state  at  step  k  at  time  k5. 

We  adopt  the  terminology  of  [2]  and  call  a  state  s  tangible  if  its  sojourn  time  is  greater  than 
zero,  C(s)  =  0,  vanishing  otherwise.  Consequently,  S  consists  only  of  tangible  states. 

Consider  a  tangible  state  at  time  step  k.  At  the  next  time  step  A:  -f- 1,  the  new 

tangible  state  is  obtained  by  first  advancing  the  phases  of  all  enabled  transitions  in  then 
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by  subsequently  traversing  vanishing  states  created  by  the  possible  firing  of  a  sequence  of  one  or 
more  candidate  transitions.  A  more  detailed  definition  of  a  state  at  time  step  Aj  -b  1  is  then  given 
by  the  following: 

•  Let  the  new  tangible  state  reached  after  any  firings  occurring  at  time  step  A:  +  1  be 

•  Let  denote  the  first  state  reached  from  where 

—  no  firing  occurred:  and 

—  the  time  is  advanced: 

•  Let  i  e  {1,2,  denote  the  z-th  state  entered  after  the  firing  of  a 

transition  f  €  such  that 

—  f  fires:  =  Af(f  and 

—  the  race  policies  are  appUed:  g 

After  n  possible  firings  in  n  vanishing  states  z  =  0, ...,  n  —  1,  we  define  the  first  reachable 

tangible  state  to  be  =  5^'=+^]”.  Note  that  if  =  0,  that  is,  if  no 

firing  occurs. 

The  previous  definition  describes  a  single  state  sequence  s*  =  (s^*^'''^^®|z  6  {0,1,  of  states 

leading  from  to  For  better  readability,  let  =  s  and  =  s.  Then,  the  set  Ss,s  of  all 

state  sequences  from  s  =  (/z,  <f>)  to  all  possible  s  =  (/z,  $}  is  given  by 

Ss,s  =  {s*=  (5°  =  (/z°,0“),S^  =  (/iSn...,5"  =  (/z",<^-))  I 
V<^°6a(/z,<?i),  5°  =  (az, 

Vi  G  {l,2,...,n},  Vf  G  C(s-i),  W  e  5*'  =  (Ad(f,/z‘-i), 

The  probability  of  a  single  state  sequence  5*  G  Ss,s  is  then  given  by 

n 

Pr{5*|s*  eSs,s/\s€s*}=g-Y[  (/*  •  F‘)  where 

9  ~  liter  ^t ) 

is  the  probability  for  a  single  combination  of  phases  G  Q{9,  <f>)  and  where  for  a  transition  f  G 
such  that  /z*  =  Ad(t’,/z*“^) 

f  = 

is  the  firing  probability  and 

F^  =  Uu^TFtiAr\^t\^i) 

is  the  probability  for  a  single  combination  of  G  /z‘-\  Fig.  7  shows  a  possible  sequence 

of  states  leading  from  s  to  s  and  the  involved  probabilities. 
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Figure  7:  A  sequence  of  states  s*  leading  from  s  =  to  s  = 

4.4  Well-defined  DDSPNs 

The  underlying  stochastic  process  of  a  DDSPN  introduced  in  Section  4.3  takes  only  the  tangible 
state  space  and  the  sojourn  time  in  a  particular  state  into  consideration.  However,  for  the  analysis 
of  a  DDSPN,  a  more  detailed  process  is  needed,  extending  the  definition  of  Section  4.3,  to  take  into 
account  the  firing  of  transition  sequences  leading  from  one  tangible  state  to  another. 

Definition  4.3  The  underlying  stochastic  process  for  a  DDSPN,  or  basic  process,  is 
{(crW,  G  IN},  where,  for  k  >  0,  €  T*  is  the  k-th.  sequence  of 

n  €  IN  transitions  to  fire,  at  time  kS,  beginning  from  state  and  reaching  state 
g[fc]n  _  for  {  =  =  NULL  and  is  obtained 

from  by  advancing  the  time  from  (fc  —  1)(J  to  kS).  □ 

Informally,  conflicts  and  confusions  can  arise  in  the  context  of  contemporary  firing  attempts 
of  PN  transitions,  which  need  to  be  sequentialized,  and  where  different  sequences  of  (formerly 
contemporary)  transition  firings  lead  to  different  undefined  stochastic  outcomes.  A  DDSPN  is  free 
of  conflicts  and  confusions  if  it  is  well-defined,  a  precondition  for  its  analysis.  The  general  approach 
of  well-defined  SPNs  has  been  first  introduced  in  [8]  and  we  now  adapt  it  to  give  a  formal  definition 
of  well-defined  DDSPNs: 

Definition  4.4  A  DDSPN  is  well-defined  if  its  basic  process  is  completely  defined,  that 
is,  if 

Vfc  €  IN,  Va  €  T*,  Vs  G  5,  Pr{crW  =  =  s} 

is  completely  determined  by  the  elements  of  the  DDSPN.  □ 

In  practice,  we  are  normally  interested  in  stochastic  reward  processes  derived  from  the  basic 
process.  Without  going  into  too  much  detail  (see  [7]  for  a  discussion  of  the  use  of  reward  rates  and 
impulses  to  define  measures  of  interest),  we  give  the  following: 
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Definition  4.5  A  stochcistic  process  {FW  €  IR  |  A:  6  IN"^}  is  a  reward  process  derived 

from  the  basic  process  through  the  reward  structure  (p,  r)  if  it  is  defined  as: 

Y"  =  E  E  '■.‘(f'®"') 

Q<j<k  \  p&erU] 

where  the  reward  rates  p  :  -4-  IR  describe  the  rate  at  which  reward  is  accumulated 

in  a  particular  marking  and  the  reward  impulses  r  :  (Tx  IN^^')  —>•  IR  describe  the  impulse 
accumulated  when  a  particular  transition  is  fired  in  a  particular  marking.  □ 

It  is  then  possible  for  the  reward  process  to  be  well-defined,  even  when  the  basic  process  is  not. 
Hence  we  need  a  further: 

Definition  4.6  A  DDSPN  is  well-defined  with  respect  to  a  reward  structure  (p,  r)  if 

Pr{yW  =  y} 

is  completely  determined  by  the  elements  of  the  DDSPN,  where  {FW  G  IR  |  A:  G  IN'*"}  is 
the  reward  process  defined  by  applying  the  reward  structure  (p,  r)  to  the  basic  process 
of  the  DDSPN.  □ 

Corollary  4.1  A  well-defined  DDSPN  is  well-defined  with  respect  to  any  reward  struc¬ 

ture.  □ 

The  concept  of  well-defined  SPNs  and  the  corresponding  test  algorithm  have  been  extensively 
discussed  in  [8]  where  more  details  and  examples  can  be  found. 

4.5  Reduced  Reachability  Graph  Generation 

In  this  section  we  will  propose  an  algorithm  for  the  construction  of  the  (finite)  reduced  reachability 
graph  (RRG)  and  for  the  calculation  of  the  impulse  rewards  of  a  well-defined  DDSPN.  The  algorithm 
also  tests  whether  the  DDSPN  is  well-defined.  The  overhead  for  this  test  is  small,  because  it  is 
based  on  the  state  space  of  the  RRG  and  on  the  impulse  reward  measures.  Rate  rewards  are  not 
affected  by  conflicts  and  confusions,  since  they  are  calculated  before  any  transition  firing  occurs. 
Therefore,  the  calculation  of  rate  rewards  is  omitted,  for  the  sake  of  better  readability,  but  it  can 
be  easily  included  into  the  algorithm.  Formally,  the  algorithm  is  given: 

•  aDDSPN  [p,T,D-,D+,D\y,g,p^°\4°\^,G,F,4f^\^,C,w),s.nd 
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•  a  set  of  impulse  reward  functions  M  =  {r^, 

where  €  IR  is  the  impulse  reward  obtained  when  firing  transition  t  in  marking  /i 

according  to  the  m-th  reward  structure,  1  <  m  <  \M\. 

If  the  DDSPN  is  well-defined,  the  algorithm  computes  the  underlying  tangible  state  space  S 
and  all  state  transitions  Vs  =  Us€5  such  that  a  single  path  set  Vs  contains  the  zero-time  state 
transitions  starting  from  state  s.  Hence,  given  that  a  tangible  state  s  is  reachable  from  a  state  s, 
there  is  a  tuple  (75,  rjs)  €  Vs  containing  the  corresponding  state  transition  probability  775  €  (0, 1]  and 
a  vector  75  =  (7I, ...,  7j^')  €  which  stores  the  accumulated  reward  value  7^,  for  every  impulse 

reward  function  r™  6  M.  A  single  tuple  (75,775)  €  Vs  also  represents  the  aggregated  individual 
probabilities  and  accumulated  impulse  rewards  of  possible  multiple  paths  along  vanishing  states 
leading  from  s  to  s. 

The  nonzero  entries  of  the  one-step  transition  probability  matrix  P  for  the  underlying  DTMC 
of  a  DDSPN  are  then  given  by:  Vs,s  €  S,'iVs  €  Vs^'^i'ys^Vs)  ^  Vs  '■  Ps,s  =  Vs-  If  tlie  expected 
accumulated  impulse  rewards  up  to  time  kS,  1  =  s]  are  known,  the  expected  accumulated 

impulses  up  to  time  [k  -f  1)<J  are  given  by  \fk  G  IN,Vs,s  G  S,\fVs  £  Vs  - 

£;[y[fc+i]  I  (5W  =  5  A  =  s)]  =  \  =  s]  + 

Standard  numerical  methods  (power  method,  SOR)  can  be  employed  for  the  transient  or  stationary 
solution  of  the  processes  of  interest. 

If  the  DDSPN  is  not  well-defined,  the  algorithm  issues  an  error  message  and  needs  to  be  restarted 
after  a  conflict  or  confusion  situation  has  been  resolved  by  the  means  of  priority  or  weight  definitions. 
See  [8]  for  a  more  detailed  discussion  of  non-well-defined  DDSPNs  and  their  implications. 

Briefly,  the  algorithm  consists  of  the  procedure  “generateRRG”  in  Fig.  8,  where  the  time  is 
advanced  in  a  given  tangible  state  =  s  leading  to  =  s°,  and  of  the  procedure  “traverse” 

in  Fig.  10,  where  subsequent  vanishing  states  are  recursively  traversed  starting  from  =  s° 

until  tangible  states  =  s  are  reached.  Three  types  of  parameters  exist:  call  by  value  (in),  call 

by  reference  (out),  and  call  by  value-reference  (inout). 

The  algorithm  is  exercised  with  the  call  “generateRRG(<S,  Vs)”  •  The  set  contains  the 

tangible  states  which  have  not  yet  been  visited.  It  is  Eissumed  that  the  initial  state  to  be  visited 
is  tangible.  In  case  of  a  vanishing  initial  state  v,  only  the  initialization  of  the  algorithm 
needs  to  be  slightly  adjusted  by 

•  first  generating  the  set  5”®®',  the  initial  tangible  states  reachable  from  v,  and  then 


75  if  3(75, 775)  G  Vs, 
0  otherwise. 
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•  by  storing  the  state  transition  probabilities  of  reaching  from  v  as  the  initial  sojourn 

probabilities  in  the  underlying  stochastic  process  (a  DTMC)  of  the  DDSPN. 

The  initial  probabilities  are  only  relevant  if  a  subsequent  transient  analysis  of  the  DTMC  is  going 
to  be  performed.  For  the  stationary  analysis  of  the  (ergodic)  DTMC,  it  is  sufficient  to  calculate  the 
first  reachable  tangible  state  as  the  initial  state;  no  initial  probabilities  are  then  needed. 

procedure  generateRRG(  out:  S,  Vs  ) 

5  =  0;  T>5  =  0; 

Snext  ^  (^[0]^<^[0]). 

while  ^  0  do 

choose  a  state  $  =  (//,  <f>)  from 

snext  _  ^next 

Vs  =  0; 

foreach  <i>)  do 

5°  = 

9  =  liter  Gtifi,  ); 
if  C(l°)  =  0  then  #  I®  is  tangible 
if  5°  ^  5  then 

<S  =  <5  U  {s°};  U  {s“}; 

'Ps  =  {ills°,9)  I  7s°  =  0); 

else  #  S°  IS  VANISHING 

traverse(s°;  S,  5”®®*;  Vp); 

Ps  =  U(73,n3)6r,o  {(ts  '9,9s-  9)} ; 

Vs  =  unify- {Vs,  V°y, 

Vs=-Vs\J  Vs', 
end  procedure 

Figure  8:  Generation  of  the  reduced  reachability  graph. 

Fig.  9  outlines  the  execution  of  “generateRRG” .  The  while-loop  of  the  procedure  visits  all  states 
of  and  calculates  the  set  of  paths  Vs,  accumulated  for  every  iteration  in  Vs,  for  each  state 

s  £  The  for-loop  advances  the  time  for  one  step  5  by  generating,  with  every  iteration,  the  new 

state  depending  on  its  possible  combination  of  next  phases  €  Qi/J;  <f>)  with  its  corresponding 
probability  g.  Moreover,  for  every  s°,  it  generates  the  set  of  paths  "P®  leading  from  s  to  tangible 
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states  via  s°  and  unifies  them  afterwards  in  the  path  set  Vs  covering  all  existing  state  transitions 
originating  in  s.  Hence,  if  is  tangible,  it  is  added  to  the  sets  of  tangible  states  S  and  5”®®*,  if  not 
already  there,  and  a  single  initial  direct  path  V°  to  with  probability  g  is  created  with  no  impulse 
rewards,  since  no  transition  firing  lead  to  If  is  vanishing,  the  call  “traverse(s°;  S,  'P|o)” 

computes  the  path  set  V^  from  which  V^  is  afterwards  obtained  by  multiplying  all  impulse  rewards 
and  path  probabilities  of  "Pjo  with  the  probability  g  of  reaching  from  s. 


The  function  unify~[Vs,V'^  unifies  two  different  path  sets  Vs  and  "P',  whose  origin  lies  in  the 
same  state  s,  so  that  multiple  paths  reaching  the  same  tangible  state  s  are  merged,  guaranteeing 
that  V(7j,7y5),  (75/,775/)  G  Vs,s  =  s'=^{js,'>ls)  =  i7s’,Vs>)-  Therefore,  the  intersection  V^  is  first 
constructed  where  paths  of  both  sets  (75,  gs)  €  Vs  and  (75,  €  P'  going  to  the  same  $  are 

aggregated  by  summing  the  corresponding  accumulated  impulse  rewards  and  path  probabilities: 

U  {(75  +  75>?75  +  ^D} 

(7s  ,Vs )  GT^s  :(7s 

Then,  all  paths  of  Vs  and  7^'  going  to  different  tangible  states  are  unified  together  with  the  inter¬ 
section  Vs^n  into  the  set  V^: 

K=  u  U  pr 

(71, 

which  is  also  the  value  returned  by  the  function. 

Fig.  11  outlines  the  execution  of  ^Traverse”.  The  first  for-loop  of  the  procedure  in  Fig.  10 
partitions  all  candidate  transitions  of  into  sets  of  candidate  transitions  belonging  to  the 
same  weight  class  Cx-  The  second  for-loop  fires  all  transitions  of  a  particular  set  Cx^}  so  that,  with 
every  iteration,  a  single  candidate  transition  f  G  Cx  is  fired  in  marking  according  to  its  firing 
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procedure  traverse(  in:  5’  ^  =  (//*  ^);  inout:  <S,  out:  Pg'-i  ) 

V,i-.  =  0; 

foreach  G  C  do 

4  =  C(5*-i)  n  =  0; 

foreach  t  G  4  <lo  #  fiRE  single  candidate 
=: 

foreach  G  <^*"^)  do  #  apply  race  policies 

F^  =  UueTFv,uir\€-\^i); 
if  C(S*)  =  0  then  #  S®  is  tangible 
if  5*  0  5  then 

5  =  5  U  {s’};  =  5”®®*  U  {s’}; 

n-  =  UT.,f‘F‘)  I  Vm  6  {1, . . . ,  |M|}.7,”  =  ; 

else  #  s’  is  vanishing 

traverse(s’;  S,  Vsi)', 

Vii-,  =  U(^s, ^5)6^5.  { (7s,  ri-,pF^)  I  Vm  G  {1, . . . ,  \M\}, 

7r={7T  +  rnfi'-^)Vs)fF^}-, 

Fpli  =  unify- {V fill,  "Pli-i); 
ifVp-i  =  0  then  Vsi-i  = 

else  if  Vp-i  Vfh  then  stop;  #  error,  DDSPN  not  well-defined 
end  procedure 

Figure  10:  Traversing  recursively  vanishing  states, 

probability  /’  leading  to  /x’.  For  each  firing  transition  t’  the  third  for-loop  applies  the  corresponding 
race  policies  to  all  phases  of  <^*~^  and  generates,  with  every  iteration,  the  new  state  s’  = 
with  probability  F’  depending  on  the  possible  combination  of  next  phases  <^*  G 
Analogously  to  the  for-loop  of  “generateRRG”,  it  first  generates  the  set  of  paths  Vy-i  leading  from 
s’~^  to  tangible  states  via  s’,  for  every  s’,  and  then  it  unifies  them  in  the  path  set  Vfli  covering 
all  existing  state  transitions  initiated  by  firing  transitions  of  Cx  in  s’~^.  Again,  if  s’  is  tangible 
(terminating  recursive  calls),  it  is  added  to  the  sets  of  tangible  states  S  and  if  not  already 

there.  Moreover,  a  single  initial  direct  path  Vli-i  with  probability  /’F’  (Fr{/i’}Fr{(^’})  for  reaching 
the  tangible  s’  is  created  together  with  instantaneous  impulse  rewards  gained  by  the  firing  of  f  in 
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leading  to  s\  If  5*  is  vanishing,  the  subsequently  reachable  states  are  explored  by  the  recursive 
call  “traverse(s®;  S,  “PjO”  which  computes  the  path  set  Pp  (assuming  that  the  vanishing 

reachability  graph  created  from  s*  is  acyclic,  finite,  and  that  no  conflict  or  confusion  occurred). 
V'-i-i  is  then  obtained  from  Vp  by  adding  the  instantaneous  impulse  rewards  of  f  to  'Psi,  so  that 
the  probability  of  a  particular  path  and  of  the  accumulated  imprdse  rewards  equals  to  775  = 
for  reaching  a  tangible  state  s  from  via 


Figure  11:  Execution  of  “traverse”. 


Conflicts  and  confusions  exhibit  a  non-deterministic  behavior  which  can  occur  in  DDSPNs  only 
in  a  vanishing  state  when  multiple  candidate  transitions  t  G  attempt  to  fire  in  zero¬ 

time  leading  to  tangible  states  s  with  different  stochastic  outcomes.  Indeed,  the  DDSPN  evolution 
during  instants  of  time  where  there  is  no  firing  is  completely  determined  by  the  assumption  of  a 
race  behavior. 

It  is  possible  to  resolve  conflicts  and  confusions  by  employing  one  of  the  following  two  methods. 
Priorities  can  be  defined  to  prevent  conflicting  transitions  from  becoming  simultaneous  candidates, 
hence  from  attempting  to  fire  at  the  same  time.  The  second  method  groups  candidate  transi¬ 
tions  involved  in  conflicts  or  confusions  into  the  same  weight  class  Cx,  so  that  contemporary  firing 
attempts  are  resolved  probabilistically  by  the  individual  firing  probability  /’  for  each  candidate 
€  Cx  where  ~  Then,  candidate  transitions  belonging  to  different  weight  classes  are 

free  of  conflicts  and  confusions,  and  they  reach  from  all  vanishing  states  the  same  tangible 
states  with  the  same  probabilities  and  with  the  same  accumulated  impulse  rewards,  regardless  of 
the  order  in  which  they  are  fired  (a  necessary  condition  for  the  absence  of  conflicts  and  confusions), 
such  that  WCx  €  C  :  P^-i  =  Ps*-!- 

If  a  vanishing  state  is  encountered  with  at  least  two  different  paths  sets  where  Vfih  ^ 
the  DDSPN  is  not  well-defined  with  regard  to  the  particular  reward  processes  of  interest.  The 
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modeler  must  then  apply  one  of  the  following  actions  to  transitions  of  Cx  and  Cy  before  restarting 
the  algorithm,  to  remove  conflicts  or  confusions: 

•  Specify  pre-selection  priorities  disabling  a  conflicting  transition  before  the  advance  of  time. 

•  Specify  post-selection  priorities,  thus  forcing  a  particular  sequence  for  contemporary  firing 
attempts. 

•  Merge  the  corresponding  weight-classes  of  conflicting  transitions  and  define  appropriate  weights 
for  them. 


5  State  Space  Reduction 

In  Section  4.5,  it  has  been  shown  how  the  one-step  transition  probability  matrix  P  of  the  underlying 
(finite)  DTMC  of  a  DDSPN  is  computed.  In  case  of  an  irreducible  DTMC,  the  stationary  solution  is 
obtained  by  solving  the  following  system  of  linear  equations  with  standard  techniques  (Gauss-Seidel, 
SOR):  TT  =  ttP  and  =  1- 

Since  P  is  usually  a  sparse  matrix,  sparse  storage  schemes  should  be  employed.  Measures  of 
interest  are  then  derived  from  the  stationary  probability  distribution  vector  tt. 

A  considerable  reduction  of  the  state  space  can  be  achieved  if  it  is  possible  to  advance  the  phases 
of  enabled  transitions  during  the  state  space  generation  for  more  than  just  one  time-step  ^  until 
a  probabilistic  split  or  a  phase  equal  to  zero  (vanishing  state)  is  reached.  This  is  the  case  when 
tangible  states  are  encountered  where  the  DTPs  of  the  enabled  transitions  have  a  unit-step  w  which 
is  a  multiple  of  the  basic  underlying  time-step  6,  a  condition  often  met  by  deterministic  transitions. 
Hence,  the  algorithm  for  the  RRG  generation  is  slightly  modified  to  test  whether  the  next  maximum 
X  phase  advancements  of  all  enabled  transitions  of  a  tangible  state  of  have  probabilities  equal 
to  one.  Consider  a  tangible  state  at  time  kS  from  which  the  following  sequence  of 

states  is  initiated 

5*  =  (st^+*l  =  (/[xW,<^l*+*l)  I  i  e  {1,2,  ...,ar},x  >  1), 

so  that: 

3x  €  lN+,Vi  G  {l,2,...,a:}  :  =  (//W,  =  1  AC(s[^+’-^l)  =  0. 

Since  no  change  of  marking  and  no  transition  firing  occurred,  the  states  of  s*  were  generated  solely 
by  phase  advancements  of  enabled  transitions  whose  phase  transition  probabilities  equal  to  one, 
hence, 

€  s*yt  €  5(5^*=+'-'^)  :  =  1. 
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Therefore,  it  becomes  possible  to  advance  directly  from  to  leaving  out  the  intermediate 
tangible  states  |i  €  {1 , 2, x  —  1}}  while  adding  their  individual  holding  times  of  hg[k+t\  =  5 
to  the  holding  time  of  so  that  h^ik]  =  x5.  If  the  last  state  of  the  sequence  is  vanishing,  51*+®!° 
is  reached  instead  of 

The  underlying  stochastic  process  is  then  a  discrete  time  semi-Markov  process  where  P  describes 
an  embedded  DTMC.  The  holding  times  in  each  state  are  no  longer  equal  to  5,  but  are  given  by  the 
holding  time  vector  h.  The  stationary  solution  can  be  obtained  employing  the  following  well-known 
method  for  semi-Markov  processes  [9]:  We  first  solve  the  system  of  linear  equations  7  =  7P  and 
J2i  li  =  1  for  tke  embedded  stationary  probabilities  7;  then,  we  rescale  7  using  the  holding  times, 
Vs  e  <S  :  7'  =  7^  •  /is;  finally,  we  normalize  the  rescaled  probabilities  7'  and  obtain  the  stationary 
probability  distribution:  tt  =  . 

In  general  the  size  of  the  state  space  depends  on  the  size  of  the  basic  underlying  time-step  S 
and  on  the  number  of  phases  of  firing  time  distributions  (DTPs)  specified  for  the  timed  transitions 
of  a  DDSPN  model.  If  embedding  is  used,  the  size  of  the  state  space  depends,  in  addition,  on  the 
maximum  possible  phase  advancements  of  all  enabled  transitions  in  tangible  states. 

6  Example 

This  section  illustrates  the  modeling  power  of  DDSPNs  by  presenting  an  example  containing  several 
deterministically  timed  activities.  Consider  the  processing  station  of  an  automated  manufacturing 
system  where  raw  parts  arrive  at  constant  time  intervals.  A  machine  tool  processes  each  raw  part 
for  a  constant  time  period.  The  tool  wears  off  and  needs  to  be  replaced  after  a  stochastically  timed 
delay  whose  value  depends  on  the  tool  quality  and  on  the  material  of  the  processed  parts.  The 
time  delay  for  the  replacement  is  constant.  The  processing  station  can  be  then  characterized  by  a 
D/D/1  /K  queueing  system  where  the  service  station  (tool)  is  subject  to  stochastic  failures  (wearout) 
and  deterministically  timed  repairs  (tool  replacement).  Fig.  12  shows  the  corresponding  DDSPN 
model.  Raw  parts,  represented  by  tokens,  arrive  with  the  firing  of  the  deterministic  transition 
arriving  and  wait  for  service  on  place  WAIT  until  the  service  station  is  empty  and  operable.  A 
single  token  on  place  IDLE  SERVER  and  the  immediate  transition  enter  service  permit  only  one  part 
at  a  time  to  enter  the  service  station  which  consists  of  the  place  SERVICE  and  of  the  deterministic 
transition  serve.  The  firing  of  serve  stands  for  the  completion  of  the  processing  of  a  single  part. 
The  failure  and  repair  of  the  service  station  are  represented  by  the  geometric  and  deterministic 
transitions  failure  and  repair,  respectively. 

We  consider  a  system  with  K  =  50  parts,  a  constant  deterministic  arrival  rate  of  and  a 
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Figure  12:  D/D/l/K  queueing  systena  with  failure  and  repair. 

constant  deterministic  repair  rate  of  The  deterministic  service  rate  is  varied  from  ^  to  ^  and 
the  geometric  failure  rate  is  varied  from  to  The  basic  underlying  time-step  of  the  model 
equals  to  Is. 

The  measure  of  interest  of  the  stationary  solution  is  the  average  number  of  waiting  raw  parts 
E{jj^W AIT']  on  place  'WAIT  depending  on  the  varying  service  and  failure  rates.  The  goal  of  our 
performance  evaluation  is  to  determine  which  minimum  performance  of  the  server,  in  terms  of  speed 
(service  rate)  and  dependability  (failure  rate),  suffices  to  achieve  a  desired  average  percentage  of 
waiting  raw  parts.  Fig.  13  shows  the  corresponding  curves,  where  E{jjIW AIT]  is  plotted  vs.  the 
firing  rates  of  transition  serve  and  transition  failure. 


Figure  13:  Mean  number  of  waiting  raw  parts  (in  rate  and  failure  rate. 


The  state  space  of  the  DDSPN  consists  of  101  tangible  markings.  Depending  on  the  deterministic 
service  rate  5,930  up  to  125,153  tangible  states  have  been  generated.  However,  employing  the 
embedding  technique  for  the  stationary  solution  of  this  particular  model  leads  to  a  state  space 
reduction  of  86.4 
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7  Conclusion 


The  results  of  [14], [5],  and  [8]  have  been  combined  introducing  the  DDSPN  formalism  where  deter¬ 
ministic  and  stochastic  firing  times  of  transitions  can  be  mixed  without  structural  restrictions  while 
providing  integrated  automatic  conflict  and  confusion  detection  on  a  discrete  time  scale. 

A  new  solution  method  combining  [5]  and  [8]  and  a  previously  not  available  algorithm  for 
mapping  a  DDSPN  onto  its  underlying  stochastic  process  have  been  presented  from  which  a  direct 
implementation  can  follow.  Thus,  a  new  practical  formalism  in  the  field  of  performance  evaluation 
has  been  enabled  with  new  features  based  on  discrete  time  as  demonstrated  for  a  typical  queueing 
application  example. 

Considerable  state  space  reduction  can  be  achieved  for  a  given  DDSPN  model  by  carefully 
choosing  timing  parameters  and,  more  importantly,  by  means  of  embedding.  Even  so,  the  DDSPN 
formalism  still  leads  to  a  large  state  space  due  to  the  additional  phase  components  in  the  state. 
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